Cited by 788Blockchain Technology Applications and SecurityAccess Control and TrustAdvanced Authentication Protocols Security

Smart contract-based access control for the internet of things

Open access
Zhang, Yuanyu, Kasahara, Shoji, Shen, Yulong, Jiang, Xiaohong, Wan, Jianxiong·2019·IEEE Internet of Things Journal

Abstract

This paper investigates a critical access control issue in the Internet of Things (IoT). In particular, we propose a smart contract-based framework, which consists of multiple access control contracts (ACCs), one judge contract (JC), and one register contract (RC), to achieve distributed and trustworthy access control for IoT systems. Each ACC provides one access control method for a subject-object pair, and implements both static access right validation based on predefined policies and dynamic access right validation by checking the behavior of the subject. The JC implements a misbehavior-judging method to facilitate the dynamic validation of the ACCs by receiving misbehavior reports from the ACCs, judging the misbehavior and returning the corresponding penalty. The RC registers the information of the access control and misbehavior-judging methods as well as their smart contracts, and also provides functions (e.g., register, update, and delete) to manage these methods. To demonstrate the application of the framework, we provide a case study in an IoT system with one desktop computer, one laptop and two Raspberry Pi single-board computers, where the ACCs, JC, and RC are implemented based on the Ethereum smart contract platform to achieve the access control.

Integrity signals

Registry

Crossref · 10.1109/jiot.2018.2847705

Cites

29 of 29 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Feng et al. used tokens to represent access rights; access control policies are embedded in locking scripts, and users prove tokens by unlocking scripts.

    “Research based on the Bitcoin blockchain includes Feng et al. [80], who used tokens to represent access rights. When passing tokens, access control policies are embedded into the transactions of locking scripts, and users can prove that they have tokens by unlocking scripts [81]”
  • Recent measurement results show that a certain amount of transaction data is leaked during blockchain operations, and data protection of blockchain is not very robust in practice.

    “Although blockchain uses encryption and digital signature to preserve transactions, recent measurement results [299] show that a certain amount of transaction is leaked during blockchain operations and data protection of blockchain is not very robust in practice.”

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Zhang, Y., Kasahara, S., Shen, Y., Jiang, X., & Wan, J.
Affiliations
  • Nara Institute of Science and Technology (JP)
  • Xidian University (CN)
  • Inner Mongolia University of Technology (CN)
Venue
IEEE Internet of Things Journal
Published
2019-04
Volume
6
Issue
2
Pages
1594-1605
ISSN
  • 2327-4662 (ISSN-L)
  • 2372-2541
OpenAlex
W2963983602
Cited by
788
References
29
Citations by year
2026: 33 · 2025: 71 · 2024: 74 · 2023: 110 · 2022: 124 · 2021: 153 · 2020: 120 · 2019: 81 · 2018: 22
FWCI
151.17
Type
journal article
Language
en
Open access
Locations
  • IEEE Internet of Things Journal (publishedVersion)
  • Institutional Repositories DataBase (IRDB) (acceptedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • NAIST Digital Library (Nara Institute of Science and Technology) (submittedVersion, cc-by-nc-nd)
  • arXiv (Cornell University)
Funders
  • National Basic Research Program of China (2017YFB1400700)
  • Japan Society for the Promotion of Science (15H04008)
  • National Natural Science Foundation of China (U1536202, 61571352, 61502255)
Topics
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Social Sciences › Sociology and Political Science › Access Control and Trust
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
smart contracts, access control, Internet of Things, Ethereum, distributed access control, misbehavior detection, punishment mechanism, single-board computer

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review